Topic: Router problems

[Matt]

Please can someboby give me a little help?  I have just installed sme 7.0

Everything went smoothly, but I am having trouble connecting to the internet.  I am trying to use a router and I also want to connect the server to my Apple extreme base station. I have connected everything up ok and I can connect to the server via the server manager Ok, but when I run the internet test it fails.  The server ip is set to 10.0.0.1 I have tryed to setup DMZ on the router but when I enter my static IP I don't get the sme webpage I just get the router login screen.  Happy to let someone take a look at my router.  

Cheers

Matt

[pfloor]

Draw us a picture such as this:

Lan---SME (Server/Gateway)---Router---Internet

Tell us what all the internal IP's are also.

P.S. If you are setup like above, you may have a problem accessing the server from you public IP address from within the lan.

Paul

[WA-Naemr]

Are you trying to use the SME server as a router?  or do you have a stand alone?


If you have a stand alone router:
   Did you make shure to tell SME server that you want it to be server only?
   Did you disable the DHCP on the SME server?

If you are trying to use SME server as a router:
   Did you make shure to tell SME server that it is a server/gateway?
   Did you reset (power cycle) your cable/dsl modem if aplicable AFTER getting your server set up?
   Do you have a STATIC WAN IP, (These often times can not be retrived by DHCP, u have to tell the server, what ALL the WAN info is

If you are running SME server as a SECOND INLINE ROUTER:
   Is it getting a WAN ip from the main router?
   Have you forwarded the nessisary ports from the router to the SME server? or set the SME as a DMZ host?
   

Does the internet work WITHOUT the SME server in the setup, if you take the SME server out, and hook everything up the way it was before, DOES THE INTERNET WORK?

[Matt]

I have my sme setup in server gateway mode behind the router,  I think I have set the router to DMZ and put the sme IP address into the router for dmz server but I still cannot get the internet to work at all.  The internet is denfinatly working so I would be garteful is someone could check my domain name from where they are.

It is www.balingout.org.uk

Whenever I try to access it from within my network I just get the router login.    Also could I ask someboby to login to my router and check my settings?

[WA-Naemr]

you domain is not accessable to me..  

chech to make shure, that the LAN ip of the SME server and the router are NOT THE SAME,   if your router is 192.168.1.1  make your sme servers LAN ip         192.168.0.1 or 192.168.2.1

if your routers ip is 192.168.0.1 make the sme 192.168.1.1

remember, these ips are for the LAN side of both the router and sme, the WAN of the router should be left alone, and the WAN for the SME should be set by the DHCP server built into the router.

also, so that your SME server does not "drift" (get a differant ip assined to it)
and provided your router supports it, reserve your SME server an ip, this is usualy assined by mac address and most routers have an easy to use setup for reserving ips to spesific computers/devices


if your router does not support it, the best alternative is to STATIC the WAN on the SME server,



if your routers LAN ip is 192.168.0.1   then a good WAN for the SME would be 192.168.0.2
also, most routers are DNS servers also, make shure you input the routers LAN into the SME WAN info
EXAMPLE:

WAN Ip: 192.168.0.2
Subnet: 255.255.255.0
Gateway: 192.168.0.1
DNS server: 192.168.0.1


see if any of this helps  




Naemr

[Matt]

Still having problems

Could someone login to my router and see if they can help, Please!

user name= admin
password=epicrouter

[WA-Naemr]

do you have remote admin on? what is the remote admin port?

[WA-Naemr]

is the domain www.balingout.org.uk correct?  is your wan ip 83.151.199.77 ?

[Matt]

balingout.org.uk is the domain

I think you should be able to login to the router from there

[WA-Naemr]

conversation went to AIM for a bit,

(02:56:55) mattpitts@mac.com: does this work
(02:57:15) coolgy100: no
(02:57:18) coolgy100: i cant log in
(02:57:25) coolgy100: make shure u have remote management on
(02:57:33) coolgy100: Server not found
         

Firefox can't find the server at balingout.org.uk.
(02:57:44) coolgy100: when i ping ur domain
(02:57:50) coolgy100: i get no responce
(02:58:05) coolgy100: can you surf the web wial connected directly to the router?
(02:58:13) mattpitts@mac.com: yes
(02:58:20) coolgy100: goto mywanip.com
(02:58:29) coolgy100: and find out what your ip is plz
(02:58:37) mattpitts@mac.com: ok
(02:59:12) mattpitts@mac.com: 83.151.199.77
(02:59:33) coolgy100: your ping is still dead,
(02:59:38) coolgy100: what router are u using?
(02:59:52) mattpitts@mac.com: some cheap one safecom
(03:00:25) coolgy100: ok, lets try this, does your SME server have a webpage set up yet?
(03:00:53) mattpitts@mac.com: only the under construction page
(03:01:01) coolgy100: thats fine,
(03:01:02) coolgy100: ok
(03:01:42) coolgy100: lets take ur cheap router out, put your SME in its place, reboot the cable/dsl modem, and see what happens, lets see if u can get on the internet, and if i can get to your page..
            03:01
(03:02:06) mattpitts@mac.com: I am also using an airport base station might that be a problem
(03:02:22) coolgy100: i dont think so..
(03:02:28) mattpitts@mac.com: its a router modem
(03:02:34) coolgy100: :/
(03:02:41) coolgy100: ok
(03:02:56) mattpitts@mac.com: is there a way of just setting it as modem
(03:02:57) coolgy100: log into the router and lets see if we can find remote management
(03:03:04) mattpitts@mac.com: ok
(03:04:11) coolgy100: if there is a way of setting it up as just a modem that may work,
(03:05:23) mattpitts@mac.com: i am looking for remote access cannot find anything as yet
(03:05:36) coolgy100: ok, then lets try modem only,
(03:05:46) mattpitts@mac.com: maybe try searching the web
(03:06:17) mattpitts@mac.com: I'm not that confident with all the router setting so gets a little confusing
(03:06:22) coolgy100: you will need to move every thing to the LAN side of the SME server, then reboot the little modem/router after setting it to modem only
(03:06:32) coolgy100: then see if you can get on the net
(03:06:48) coolgy100: also, try using the cmd prompt on your sme server
(03:06:51) coolgy100: lig in as admin
            03:06
(03:07:00) coolgy100: and use the test internet feature
(03:07:21) coolgy100: what is the modle number of your router?
(03:07:24) mattpitts@mac.com: I am just checking the safecom webiste
(03:07:49) mattpitts@mac.com: http://safecom.cn/code/default.asp
(03:08:11) mattpitts@mac.com: the router is a samr-4114
(03:08:20) coolgy100: oh great, generic buffalo
(03:09:37) mattpitts@mac.com: just found this on the sat
(03:09:43) mattpitts@mac.com:
SAMR-4114 does not support Remote Management.
(03:10:28) coolgy100: http://safecom.cn/code/product/adsl/samr-4110/port-forwarding.htm
(03:10:33) coolgy100: make shure port 80
(03:10:44) coolgy100: is forwarded to the SME server
            03:11
(03:12:17) coolgy100: goto your wan configuration screen
(03:12:31) coolgy100: and see if theres a "respond to ping on WAN port"
(03:12:36) coolgy100: or ICMP
(03:12:52) mattpitts@mac.com: no
(03:13:12) mattpitts@mac.com: not sure how to set up port fowarding
(03:13:49) coolgy100: ok
(03:14:02) coolgy100: on the left, under configuration
(03:14:09) coolgy100: goto "Virtual servers"
(03:14:28) mattpitts@mac.com: ok
(03:14:33) coolgy100: in public port - start put 80
(03:14:42) coolgy100: in public port end also 80
(03:14:44) mattpitts@mac.com: ok
(03:14:50) coolgy100: and in private port 80
(03:14:55) coolgy100: port type tcp
(03:15:01) coolgy100: and in host ip address
(03:15:12) coolgy100: put the ip of your SME servers WAN port
(03:15:26) mattpitts@mac.com: ok
(03:15:58) mattpitts@mac.com: ok thats done
(03:16:16) mattpitts@mac.com: i need to reboot router
(03:16:21) coolgy100: still cant load your website
(03:16:24) coolgy100: kk
            03:16
(03:17:11) mattpitts@mac.com: try now
(03:18:13) coolgy100: nope, still nothing
(03:18:20) coolgy100: goto wan under configuration
(03:18:39) mattpitts@mac.com: ok
(03:18:43) coolgy100: look for igmp
(03:19:05) coolgy100: if it is disabled, enable it
(03:19:26) mattpitts@mac.com: there is no such option
(03:20:00) coolgy100: is this what you see in WAN?   Select Adapter: Adapter:  
(03:20:08) mattpitts@mac.com: yes
(03:20:25) mattpitts@mac.com: i have Pvc 0
(03:20:32) mattpitts@mac.com: and a drop down
(03:20:35) coolgy100: ok, select the first adapter in the list and hitsubmit
(03:20:50) mattpitts@mac.com: ok
(03:21:05) mattpitts@mac.com: big menu
(03:21:11) coolgy100: do you now see an IGMP?
(03:21:18) mattpitts@mac.com: yes
(03:21:29) coolgy100: ok, lets enable it,
(03:21:31) mattpitts@mac.com: its disabled
(03:21:33) mattpitts@mac.com: ok
(03:21:41) mattpitts@mac.com: done
(03:21:50) coolgy100: ok, hit submit at the botom of the page
            03:21
(03:22:16) mattpitts@mac.com: i need a reboot
(03:22:19) coolgy100: kk
(03:22:22) coolgy100: go ahed
(03:23:13) mattpitts@mac.com: should be up again
(03:24:03) coolgy100: ok, i am gonna need you to go to wan, and select each adapter one by one and enable IGMP
(03:24:11) mattpitts@mac.com: ok
(03:24:25) mattpitts@mac.com: there are 9
(03:24:31) coolgy100: or, go on ebay and find the NETGEAR ADSL/Router
(03:24:33) coolgy100:
(03:25:00) coolgy100: yess, all 9 adapters must have IGMP enabled
(03:25:18) mattpitts@mac.com: ok i will gib
(03:25:24) mattpitts@mac.com: give it a go
(03:25:39) coolgy100: k
            03:26
(03:26:58) coolgy100: then, after that, i need you to go to firewall    way down at the botom left, and disable it
(03:27:07) mattpitts@mac.com: this is going to take a while
(03:27:16) mattpitts@mac.com: firewall is already disabled
(03:27:19) coolgy100: k
(03:27:40) coolgy100: on the firewall page, click service filtering
(03:27:52) coolgy100: is the ping checkbox filled in?
(03:28:08) mattpitts@mac.com: i just ticked it
(03:28:13) coolgy100: k
(03:28:19) coolgy100: submit and reboot
(03:29:08) mattpitts@mac.com: can you ping now
(03:29:19) coolgy100: no, ping still dead,
(03:29:24) coolgy100: you may want to try this
(03:29:33) coolgy100: many ISPs BLOCK outside trafic
(03:29:36) coolgy100: like web pages
(03:29:41) coolgy100: i am through cox
(03:29:47) coolgy100: and for me to set up a web site
(03:29:54) coolgy100: i had to get a buisness account
(03:30:00) coolgy100: to open the ports up
(03:30:17) mattpitts@mac.com: maybe i should ask them
(03:30:42) coolgy100: it would probably be a good idea, i know i stressed and ripped my hair out for weeks
(03:30:45) coolgy100: only to lern
(03:30:50) coolgy100: my setup was good
(03:31:00) coolgy100: they just had what i was tryin to do blocked
(03:31:25) mattpitts@mac.com: think i might get hold of a netgear router anyway
(03:31:37) mattpitts@mac.com: seems much easier
(03:31:49) coolgy100: yes, it would be a good idea, the netgear adsl one
            03:31
(03:31:57) coolgy100: is an adsl modem/router
(03:32:02) mattpitts@mac.com: is that what you use?
(03:32:03) coolgy100: but a mutch higer quality
(03:32:10) coolgy100: no, i am on cable now
(03:32:18) coolgy100: but i know many who use that one
(03:32:36) coolgy100: i use the standard netgear cable/dsl router
(03:32:44) coolgy100: with an rj45 wan port
(03:32:54) coolgy100: u need the adsl router with the rj11 wan

[Matt]

Just thought I would post now and explain how I solved my problems

I have a safecom SAMR 4114 router modem which i got free with my ASDL package.  I have just installed sme 7 and wanted to host my own web and mail server.  I was having problems with the hardware setup and finally figured it out as follows:-

1.  The modem router has an IP of 10.0.0.2
2.  So I set the local IP of the sme to 10.0.0.100 same range as the router
3.  Set sme to server and gateway
4.  set the external static IP in the same range as the modem router, I chose 10.0.0.3
5.  Set the Gateway IP address to that of the router 10.0.0.2

I the made sure I had all the wires pumped in the right way round, if in doubt double check and try the other way, just in case.  

Then I stuck a switch between my sme and my apple powerbook.

Everything works just as it should as far as I can see.  

Even uploaded some webpages to www.balingout.org.uk which I can view from within my network.  

Could somebody confirm that the site is working for me and try sending me an email to matt@balingout.org.uk

Thanks as always, for your help  

[Matt]

Just thought I would post now and explain how I solved my problems

I have a safecom SAMR 4114 router modem which i got free with my ASDL package.  I have just installed sme 7 and wanted to host my own web and mail server.  I was having problems with the hardware setup and finally figured it out as follows:-

1.  The modem router has an IP of 10.0.0.2
2.  So I set the local IP of the sme to 10.0.0.100 same range as the router
3.  Set sme to server and gateway
4.  set the external static IP in the same range as the modem router, I chose 10.0.0.3
5.  Set the Gateway IP address to that of the router 10.0.0.2

I the made sure I had all the wires pumped in the right way round, if in doubt double check and try the other way, just in case.  

Then I checked the Test Inernet access on the server console and it worked!

Then I stuck a switch between my sme and my apple powerbook.

Everything works just as it should as far as I can see.  

Even uploaded some webpages to www.balingout.org.uk which I can view from within my network.  

Could somebody confirm that the site is working for me and try sending me an email to matt@balingout.org.uk

Thanks as always, for your help  

[Matt]

I forgot to mention that I also enabled  DMZ in the router admin and set the DMZ IP to that of my sme server.

I also disabled to routers firewall,  I am told this  is safe as sme server has its own firewall, so in effect everything on the sme should work just fine.  Is that right?

[byte]

Yup your site works here.

[idp_qbn]

Hi, Matt,
You wrote:
1. The modem router has an IP of 10.0.0.2
2. So I set the local IP of the sme to 10.0.0.100 same range as the router
3. Set sme to server and gateway
4. set the external static IP in the same range as the modem router, I chose 10.0.0.3
5. Set the Gateway IP address to that of the router 10.0.0.2

I would have tried:
1. Set sme to server and gateway
(Should be set first, I think)
2. The modem router has an IP of 10.0.0.2/255.255.255.0
RE-ENABLE the Modem/router firewall
3. Set the RED (EXTERNAL) IP of the sme to 10.0.0.3/255.255.255.0 same range as the router
4. Set the Gateway IP  address to that of the router 10.0.0.2
(You could try DHCP on Modem router to give SME its red address in wich case you would not need to do 3 and 4)

5. set the GREEN (INTERNAL) static  IP of the SME to 192.168.x.1
(x is the subnet of your choice eg 0,1,2...254)
6. Turn on DHCP for SME, with a range of 192.168.x.y - 192.168.x.z
(y and z could be 100 & 200, for example)
7. Let each workstation then gets its address from the SME. You can tell them their gateway is 192.168.x.1 if you need to.

Your network you have described is a "flat" one...your router, gateway and workstations all on the same subnet. If I can hack your modem router (and you need to change the password on that now you have put it on the internet) then I can hack any system on that system easily. And, I could go directly from one of your workstaions out through the modem/router bypassing the SME.

It would be safer to  have a "layered" network (like I decribed), which puts the modem/router and the RED side of the SME on one subnet and the GREEN side of the SME and your workstations on another:

modem (10.0.0.2) <===> RED SME (10.0.0.3) <===> GREEN SME (192.168.x.1) <===> workstations (192.168.x.100-200)
This gives you a double line of defence (and SME is pretty good firewall) AND the workstations have to go through the gateway SME to get to the internet....and DHCP and email etc.

Anyway, good luck and cheers

Ian

[WA-Naemr]

There is a problem with your idea to hack, even thogh he has a "flat" as you put it network, he still has the FIREWALL on the SME server on, and the sme is providing NAT translation, therefore, you cant see past the SME, even if you get past the router.
Plus, with this SME set as a DMZ host on the router, it basicaly puts his SME directly on the web, any firewall on the router, would ether
 A: do ABSOLUTLY NOTHING
or
 B: get in the way, making it so one one could get to the website/email that he is providing..

Linux firewalls are among the best, so i see no risk with that part of the setup.


However, setting the internal network (green interface, LAN) to a standard class C network type; 192.168.0.n is a good idea, then let the SME server give out the ip addresses to the innermost network.

[idp_qbn]

BUT......
If the modem/router, SME and the workstations are all on the same subnet, anyone compromising the modem/router has free access to the workstations, bypassing the firewall on SME...the only protection left is whatever is on the workstations themselves. There is no real NAT happening here, since everything internal is on the 10.0.0.0 subnet.

BTW, I have no idea how to hack a modem/router unless it is left with external access enabled and the default username/password left unchanged. Someone with greater networking skills may be able to get in, though.

Cheers

Ian

[WA-Naemr]

That is not how NAT works. Even with every thing on the same subnet, they dont know it, the SME server creates a SEPERATE network on the green interface, the internal network can see OUT but, the external network (red) can not see IN unless the firewall on the SME is told to let SPESIFIC trafic in, and then, it is only directed to a pre designated host (eg, port 21 to 192.168.0.5)

[Matt]

Guys

Thanks for all the advice,  I have changed my local sme IP to 192.168.0.1 and then pluged it directly into my airport base station and I now have wireless internet access which is great.  

However now I cannot see the website from outside my LAN????  All I want to do is be able to host my web and email server.  When I had the flat network as described eariler the website amd email worked fine from outside the LAN but I couldn't get the connection to the airport to work at all.

I am very frustrated because it feels like I am almost there!!!!

I have a static IP on my asdl line and my domain is pointing to it but then I go on to mywanip.com my static IP isn't right in fact it is one of my LAN range, I think

Any suggestions........

[Matt]

Here is my current server configuration

Review configuration
Networking Parameters
Server Mode   servergateway
Local IP address / subnet mask   192.168.0.1/255.255.255.0
External IP address / subnet mask   10.0.0.3/255.0.0.0
Gateway   10.0.0.2
Additional local networks   192.168.0.0/255.255.255.0
DHCP server   enabled
Beginning of DHCP address range   192.168.0.11
End of DHCP address range   192.168.0.25
Server names
DNS server   192.168.0.1
Web server   www.balingout.org.uk
Proxy server   proxy.balingout.org.uk:3128
FTP server   ftp.balingout.org.uk
SMTP, POP, and IMAP mail servers   mail.balingout.org.uk
Domain information
Primary domain   balingout.org.uk
Virtual domains   matts-gallery.co.uk
balingout.org.uk
Primary web site   http://www.balingout.org.uk
Server manager   https://horsmonden/server-manager/
User password panel   https://horsmonden/user-password/
Email Addresses   useraccount@balingout.org.uk
firstname.lastname@balingout.org.uk
firstname_lastname@balingout.org.uk[/img]

[Matt]

The WAN IP on my router is 83.151.199.77 which is the Static IP from my ISP, so why is the WAN IP 192.168.0.25 on mywanip.com  

My domain is pointing to 83.151.199.77 but isn't working what should I do?

[WA-Naemr]

heres how it should be...      (adsl modem/router 10.0.0.1)------(SME server ->WAN<- port  10.0.0.2)------(SME server ->LAN<- 192.168.0.1)-----(Ethernet switch or hub 'no ip')-------(all of the computers on your network... 192.168.0.2-192.168.0.255)

MAKE SHURE YOUR FIREWALL ON THE MODEM/ROUTER IS OFF!


hook the airport up to the switch as thogh it where a computer

[Matt]

Hi WA-Naemr

I have changed my sme setup to the one you decribed in your most recent post and connected my sme and the airport directly to my switch.  The internet works fine, but I can still only see my website from within the LAN.  I have enabled DMZ and set my sme IP to the DMZ IP and switched off the router firewall, so why cannot I get website and email to be seen outside of LAN?  

PLEASE, PLEASE, PLEASE HELP THIS VERY FRUSTRATED PERSON

[WA-Naemr]

did you make shure you set the WAN ip of the sme server on the same network as the router/modem? (EG: router 10.0.0.1 and sme 10.0.0.2)
also, can your sme server see the internet? (login as admin and pick 'test internet') if it can not see it, it and the router are not comunicating,


also, make shure you dont have the sme server pluged in backwards!  (the lan nic connected to the router and the wan connected to the local switch)


also, make shure your sme server is on the firts port on the router (not wan, port number 1...)

[WA-Naemr]

Also try manualy forwarding the ports (this would be virtual servers for your router) forward 80 for wepsite, 21 for ftp, and so on

[CharlieBrady]

Still having problems

Could someone login to my router and see if they can help, Please!

user name= admin
password=epicrouter

This was a rather silly thing for you to have done. You now have no idea how many people may have logged into your router or how many changes they may have made.

I certainly hope that you have now disabled remote access and changed to a very well chosen password.

[WA-Naemr]

actualy, his router (luckaly) does not support remote management  

[idp_qbn]

I did a Google search for safecom SAMR-4114 and found the following link about port forwarding (http://tinyurl.com/qu3x7) which you probably will have to do to get your webserver visible from the 'outside' ie the Internet.

Cheers
Ian